Coruna and DarkSword Exploit Kits Can Fully Compromise iPhones From a Single Web Visit
Two powerful iPhone exploit kits, Coruna and DarkSword, show how a visit to a malicious or compromised website
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Windows SmartScreen Vulnerability Enables Privilege Escalation Attacks
Microsoft has released fixes for a Windows SmartScreen vulnerability that allows an attacker with local access to gain
Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs
Microsoft issued its largest ever round of security updates in the October Patch Tuesday
Hackers Breach Meta GitHub Repositories, Steal Source Code and Data of 1,500 People
Hackers used an employee’s stolen credentials to access some of Meta’s GitHub repositories, taking product source code and
Attackers Breach European Bank Through Third-Party Gateway and Target WSUS Server
A European bank was breached through a poorly secured, third-party gateway before an attacker tried to exploit its
Gears of War: E-Day Hit by DDoS Attack, Causing Login Failures and Disconnects
Gear of War: E-Day players faced login failures, sudden disconnects, and other online service problems after distributed denial-of-service
Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched
New Chainguard research reveals larger companies struggle to patch vulnerabilities due to business priorities and operational disruption
Multiple Google Chrome Flaws Could Enable Memory Corruption and Code Execution Attacks
Google released a Chrome security update that addresses 37 vulnerabilities, including seven critical flaws that raise concerns about
View intelligence · Critical
Ivanti Connect Secure 0-Days Exploited to Steal Active Directory Credentials
Attackers chained three zero-day flaws in Ivanti Connect Secure VPN appliances to gain root-level access without logging in,
Windows BitLocker Vulnerabilities Security Feature Bypass and Privilege Elevation Attacks
Microsoft fixed three Windows BitLocker vulnerabilities CVE-2026-85920, CVE-2026-88070, and CVE-2026-83500 that could enable privilege escalation or bypass security
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the